Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/aZjr0qSqsC5TZ--SIJBvp2KJX08.roa
File: aZjr0qSqsC5TZ--SIJBvp2KJX08.roa (raw, json)
Hash identifier: x4NE0mEcj6rtLE+aPYcM/IbIItnWm2oIU15lzEKp71Q=
Subject key identifier: 69:98:EB:D2:A4:AA:B0:2E:53:67:EF:92:20:90:6F:A7:62:89:5F:4F
Certificate issuer: /CN=ae93cc8cca81fa00dc53e7b8078e91b5c11ba2ef
Certificate serial: 02225F17
Authority key identifier: AE:93:CC:8C:CA:81:FA:00:DC:53:E7:B8:07:8E:91:B5:C1:1B:A2:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rpPMjMqB-gDcU-e4B46RtcEbou8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/aZjr0qSqsC5TZ--SIJBvp2KJX08.roa
Signing time: Sat 01 Jan 2022 14:55:22 +0000
ROA not before: Sat 01 Jan 2022 14:55:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212426
IP address blocks: 80.249.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35806999 (0x2225f17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae93cc8cca81fa00dc53e7b8078e91b5c11ba2ef
Validity
Not Before: Jan 1 14:55:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6998ebd2a4aab02e5367ef9220906fa762895f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:0a:5e:81:f3:b8:fb:c3:a3:57:46:f7:61:f6:
92:32:f4:c2:aa:22:bb:4c:86:58:82:89:0c:fc:b0:
26:f9:6c:f1:65:37:70:c8:94:3c:f1:80:97:b2:83:
8b:99:35:33:e6:8d:87:40:a1:82:5d:e5:5d:39:fd:
f1:8b:f2:77:2c:d9:76:9c:b2:4a:cb:fd:a7:41:b8:
bd:c3:64:9b:99:1f:dc:a9:26:74:46:92:76:79:40:
de:7e:4f:e4:68:c6:be:7d:9f:46:4a:58:22:fe:86:
83:1c:d8:28:00:ea:3d:12:7b:59:fa:6a:a4:97:ab:
47:8f:ec:d1:6f:57:f0:33:ec:a7:7f:03:32:9f:b5:
5e:ea:9f:b9:47:d1:62:94:c4:ff:4a:73:38:e2:d5:
2b:2c:3a:40:f5:4c:60:39:a1:2c:cb:08:9f:b3:12:
cf:b3:ba:08:3b:75:ea:70:19:5a:82:9f:2f:d2:9c:
4e:d5:33:e7:b3:ac:21:06:53:a9:a5:cd:60:dd:25:
12:11:a9:a7:bd:14:42:73:92:fb:bf:63:f8:b7:c1:
24:18:17:27:b8:de:83:78:2f:52:a5:a2:9f:2b:42:
45:1e:5f:49:bd:59:b1:7e:7b:da:31:13:96:94:c9:
20:78:04:f0:69:73:f9:6d:01:37:17:a0:ed:73:a4:
83:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:98:EB:D2:A4:AA:B0:2E:53:67:EF:92:20:90:6F:A7:62:89:5F:4F
X509v3 Authority Key Identifier:
keyid:AE:93:CC:8C:CA:81:FA:00:DC:53:E7:B8:07:8E:91:B5:C1:1B:A2:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rpPMjMqB-gDcU-e4B46RtcEbou8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/aZjr0qSqsC5TZ--SIJBvp2KJX08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.249.128.0/24
Signature Algorithm: sha256WithRSAEncryption
85:75:96:9b:44:2e:13:9c:db:84:2f:44:86:2c:10:c0:1a:03:
79:4b:45:6f:be:43:2c:3e:f4:c0:3b:dc:f5:40:a0:8c:8a:a8:
8c:ba:89:76:ce:8d:81:4e:22:ee:31:e3:95:36:82:e7:18:da:
a2:c9:7f:a4:8f:8e:7a:2d:d9:06:02:7b:aa:92:8b:e7:06:7c:
7b:0f:9c:53:e5:7c:62:fe:d7:71:5a:25:52:12:fc:58:8f:c9:
9b:43:68:c6:73:a3:7e:72:aa:1d:48:3d:03:cf:94:5b:d5:84:
4d:4d:c5:f0:61:15:c2:3f:34:a5:3a:be:66:ef:25:25:9a:31:
f7:76:ef:4e:24:a7:6b:01:2c:cf:ac:fc:aa:f5:5e:d2:e3:c3:
4c:f7:da:42:ed:cb:4f:e8:26:bc:e2:53:7e:c4:53:d2:b7:ac:
eb:b4:35:e0:bc:e7:59:1e:b0:20:dc:36:5e:90:eb:4f:62:e4:
ed:f9:ea:db:0f:d6:85:00:18:7a:7a:5f:cb:8e:fe:b7:2f:68:
3d:28:5d:90:26:af:80:8a:7c:c0:a4:8a:ac:34:2b:b0:78:be:
95:df:9f:0e:75:74:7f:60:c3:8d:5d:b4:ef:5a:f4:60:8d:f7:
f9:f0:70:e3:ed:75:a9:75:dc:df:bf:34:7d:1e:68:b5:28:d3:
77:68:e5:e5
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAiJfFzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
ZTkzY2M4Y2NhODFmYTAwZGM1M2U3YjgwNzhlOTFiNWMxMWJhMmVmMB4XDTIyMDEw
MTE0NTUyMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjk5OGViZDJhNGFh
YjAyZTUzNjdlZjkyMjA5MDZmYTc2Mjg5NWY0ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAO0KXoHzuPvDo1dG92H2kjL0wqoiu0yGWIKJDPywJvls8WU3
cMiUPPGAl7KDi5k1M+aNh0Chgl3lXTn98YvydyzZdpyySsv9p0G4vcNkm5kf3Kkm
dEaSdnlA3n5P5GjGvn2fRkpYIv6GgxzYKADqPRJ7WfpqpJerR4/s0W9X8DPsp38D
Mp+1XuqfuUfRYpTE/0pzOOLVKyw6QPVMYDmhLMsIn7MSz7O6CDt16nAZWoKfL9Kc
TtUz57OsIQZTqaXNYN0lEhGpp70UQnOS+79j+LfBJBgXJ7jeg3gvUqWinytCRR5f
Sb1ZsX572jETlpTJIHgE8Glz+W0BNxeg7XOkgzMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRpmOvSpKqwLlNn75IgkG+nYolfTzAfBgNVHSMEGDAWgBSuk8yMyoH6ANxT
57gHjpG1wRui7zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3JwUE1qTXFCLWdEY1UtZTRCNDZSdGNFYm91OC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDkvMTc5ODkxLTQxY2MtNGFhMC1hYjY4LWY0MDZjODNiM2ZiYS8x
L2FaanIwcVNxc0M1VFotLVNJSkJ2cDJLSlgwOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkv
MTc5ODkxLTQxY2MtNGFhMC1hYjY4LWY0MDZjODNiM2ZiYS8xL3JwUE1qTXFCLWdE
Y1UtZTRCNDZSdGNFYm91OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFD5gDANBgkqhkiG9w0BAQsFAAOC
AQEAhXWWm0QuE5zbhC9EhiwQwBoDeUtFb75DLD70wDvc9UCgjIqojLqJds6NgU4i
7jHjlTaC5xjaosl/pI+Oei3ZBgJ7qpKL5wZ8ew+cU+V8Yv7XcVolUhL8WI/Jm0No
xnOjfnKqHUg9A8+UW9WETU3F8GEVwj80pTq+Zu8lJZox93bvTiSnawEsz6z8qvVe
0uPDTPfaQu3LT+gmvOJTfsRT0res67Q14LznWR6wINw2XpDrT2Lk7fnq2w/WhQAY
enpfy47+ty9oPShdkCavgIp8wKSKrDQrsHi+ld+fDnV0f2DDjV2071r0YI33+fBw
4+11qXXc3780fR5otSjTd2jl5Q==
-----END CERTIFICATE-----
Generated at Wed Apr 23 03:41:46 2025 by rpki-client